Lucene search

CVE-2023-28438

🗓️ 22 Mar 2023 21:18:15Reported by GitHub_MType

Pimcore prior to v10.5.19 allows SQL injection via 'report' permissio

Reporter	Title	Published	Views	Family All 8
Github Security Blog	Pimcore vulnerable to improper quoting of filters in Custom Reports	22 Mar 202321:23	–	github
OSV	Pimcore vulnerable to improper quoting of filters in Custom Reports	22 Mar 202321:23	–	osv
OSV	CVE-2023-28438	22 Mar 202321:15	–	osv
Cvelist	CVE-2023-28438 Pimcore vulnerable to improper quoting of filters in Custom Reports	22 Mar 202320:46	–	cvelist
NVD	CVE-2023-28438	22 Mar 202321:15	–	nvd
Prion	Cross site request forgery (csrf)	22 Mar 202321:15	–	prion
Veracode	SQL Injection	31 Mar 202308:14	–	veracode
The Hacker News	Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking	27 May 202307:45	–	thn

Nvd

Vulners

Node

pimcore pimcoreRange<10.5.19

[
  {
    "vendor": "pimcore",
    "product": "pimcore",
    "versions": [
      {
        "version": "< 10.5.19",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/pimcore/pimcore/commit/d1abadb181c88ebaa4bce1916f9077469d4ea2bc.patch
github	www.github.com/pimcore/pimcore/pull/14526
github	www.github.com/pimcore/pimcore/security/advisories/GHSA-vf7q-g2pv-jxvx

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

22 Mar 2023 21:15Current

7.2High risk

Vulners AI Score7.2

CVSS38

EPSS0.002

CWE-89